Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File: GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier: 7hhRhg9ei6N8/aSzJ/c7Zo8iEOV1nA3qoxMlDOhb4r4=
Subject key identifier: 5E:32:28:9E:DC:CA:07:C1:45:02:DD:99:17:12:5E:3C:FE:75:4C:62
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 019D371BA641063BE157D0F65B2024D53C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number: 0F77
Signing time: Sun 29 Mar 2026 01:00:51 +0000
Manifest this update: Sun 29 Mar 2026 01:00:51 +0000
Manifest next update: Mon 30 Mar 2026 01:00:51 +0000
Files and hashes: 1: 0-Du4a3wTcLjHP17S235eocvetM.roa (hash: u4GgqQE96O1hG6gnLUh00BTZ9JVaaf72zWAUZel0hK4=)
2: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: qTE3mNV0RdeSqnjqyi4EO++JSQ2GhrPfk0Pp9tyKVS4=)
3: rw01fr1t_p6yAH6IdbMhs5zW9Xs.roa (hash: xwniHCIPcTk6T6SZ9CnReFPZPS7gn1Cci1vAjNWFN+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a6:41:06:3b:e1:57:d0:f6:5b:20:24:d5:3c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Mar 29 01:00:51 2026 GMT
Not After : Mar 30 01:00:51 2026 GMT
Subject: CN=5e32289edcca07c14502dd9917125e3cfe754c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:cc:78:bb:b4:45:6f:36:92:61:42:6d:06:
20:c2:10:b9:2e:d3:e0:40:4a:54:f7:34:48:8b:c3:
ea:74:96:1d:29:63:e0:96:ea:45:82:96:9f:65:8d:
b1:fe:cb:3a:20:93:df:47:d1:43:3a:99:7e:48:44:
8f:55:09:d6:4d:f0:5d:52:1b:5a:29:7b:c0:25:25:
06:11:3a:4a:1f:48:46:b7:2a:19:94:9c:ab:cc:9d:
7a:23:fc:ce:3b:81:bd:bc:02:b1:15:7d:06:73:f7:
36:6f:43:11:86:65:1e:ab:61:2b:d5:5f:09:88:8b:
1d:1f:26:40:94:e2:2c:08:a4:85:94:7a:b4:ed:9d:
cf:ec:6f:c8:f7:1e:d5:dd:cd:99:54:be:e0:4e:f1:
6e:94:e2:a4:3d:80:9f:87:86:6c:3b:ad:f6:08:98:
45:2f:e0:8d:43:5e:13:02:18:ab:23:ba:1b:7b:56:
67:1a:c7:09:09:10:24:d9:97:e7:d6:48:4e:57:5a:
d0:71:51:af:2e:1a:38:25:a5:aa:5c:02:60:4d:2f:
54:4a:df:9f:c8:26:52:02:96:6a:bf:4d:07:41:23:
a2:a7:4b:08:08:c3:1a:cc:ba:1b:95:c2:0f:fc:4c:
5d:36:e2:4b:c5:95:11:2d:98:fc:1a:63:89:a9:73:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:32:28:9E:DC:CA:07:C1:45:02:DD:99:17:12:5E:3C:FE:75:4C:62
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:e6:67:0d:57:4b:42:27:ba:61:19:fe:97:60:8b:a4:2f:
50:ba:ae:de:df:9f:dc:ad:5a:cd:9d:a2:20:7a:84:70:b5:dc:
d3:a6:33:dc:d8:a5:a7:3b:1f:89:bc:5c:73:9b:ba:96:28:f6:
a8:38:f2:e4:d6:ed:15:02:c6:76:22:ba:14:07:89:67:a7:f6:
69:2e:5a:8d:1c:45:3b:4e:81:db:4b:ee:57:62:90:c7:34:25:
28:bd:00:a3:d3:42:d2:4f:f9:5e:5b:a6:5b:61:84:7e:10:de:
6f:fd:cb:8a:97:37:3e:8d:45:4c:b1:f6:e9:05:18:bb:f1:49:
09:e6:fa:24:72:37:2d:c4:ee:3a:d5:49:83:b0:ec:5e:e4:55:
e5:cb:c2:cc:48:6d:a0:32:27:e2:4d:56:b1:09:c2:69:f8:46:
96:4e:c4:14:9b:87:14:3e:e3:f5:72:e3:e5:9b:0b:b1:f9:c1:
6d:91:0a:10:63:9e:3a:93:52:72:0e:47:c5:1d:4a:4c:05:d0:
0e:2c:aa:d0:74:a8:ec:ba:28:7c:56:49:8b:08:86:22:1d:6b:
f1:1e:da:b7:a8:85:9a:06:b4:87:c6:ad:f9:dd:4d:a0:a3:9e:
ef:c0:94:26:7d:90:64:77:41:3b:c5:66:08:83:59:7b:1d:91:
25:54:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:22 2026 by rpki-client